Cisco Secure Access Control Server XML External Entity Injection Vulnerability (CNVD-2018-05230)

Cisco Secure Access Control Server ACS is a secure access control server from Cisco USA. The server provides a comprehensive identity-based access control solution for Cisco intelligent information networks. An XML external entity injection vulnerability exists in the Web-based user interface in...